🇧🇪
madeit
2026-08-28 10:40:42
(2 days ago)
Web App Attack
🇨🇭
4server
2026-08-22 12:47:47
(1 week ago)
[SatAug2214:47:39.0260572026][security2:error][pid2469901:tid2470207][client172.70.38.94:0]ModSecuri ...
show more
[SatAug2214:47:39.0260572026][security2:error][pid2469901:tid2470207][client172.70.38.94:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"465\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"rssolution.ch\"][uri\"/.env.old\"][unique_id\"aomaa4vxi7NqQ-HmeO_oPgAAAEo\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 23:12:02
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.70.38.94 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.38.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 19:11:58.676120 2026] [security2:error] [pid 23590:tid 23590] [client 172.70.38.94:11256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thevoice4you.eu"] [uri "/.git/HEAD"] [unique_id "aoOVPqblW3AJ_8w2eiSm7wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 08:20:10
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.70.38.94 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.38.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 04:20:02.993858 2026] [security2:error] [pid 15806:tid 15806] [client 172.70.38.94:13167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.bsa1688.com"] [uri "/.git/config"] [unique_id "aoLEMjt6bcQofln66q1GtgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 07:53:54
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.70.38.94 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.38.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 03:53:45.664232 2026] [security2:error] [pid 20238:tid 20238] [client 172.70.38.94:13904] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.koeckeritz.com"] [uri "/.git/config"] [unique_id "aoFsiTkXEuAgFaWtLobtcwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-08-04 04:10:51
(3 weeks ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 08:38:03
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.38.94 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.38.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 04:37:53.776830 2026] [security2:error] [pid 9489:tid 9531] [client 172.70.38.94:11403] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.serviio.acornway.com"] [uri "/.env.development"] [unique_id "agbbYeByGv80om2YDAq9uQAAAEc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
abdubhai
2026-04-08 13:36:07
(4 months ago)
172.70.38.94 - - [08/Apr/2026:18
...
Brute-Force
🇺🇸
TPI-Abuse
2026-04-07 06:39:35
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.38.94 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.38.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 02:39:29.021951 2026] [security2:error] [pid 1616866:tid 1616866] [client 172.70.38.94:9779] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.blackmanfamily.com"] [uri "/.env.production.bak"] [unique_id "adSmobDMvbUevxrAzwk0NAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 16:38:57
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.38.94 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.38.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 12:38:49.810278 2026] [security2:error] [pid 300588:tid 300588] [client 172.70.38.94:14307] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thebeesgold.garyrankin.com"] [uri "/.env.backup"] [unique_id "adPhmd1378GIBs8zVmljzwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 15:15:44
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.38.94 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.38.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 11:15:31.948121 2026] [security2:error] [pid 78271:tid 78271] [client 172.70.38.94:11939] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.lucid-hq.com"] [uri "/.env.bak"] [unique_id "adPOE1pWOV3RAV1g0SJfxgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 06:44:46
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.38.94 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.38.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 02:44:38.350688 2026] [security2:error] [pid 16214:tid 16214] [client 172.70.38.94:11189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "porterpromo.dance4ovations.com"] [uri "/config/.env.local"] [unique_id "adNWVlnwFjQgQX7YKLK2fwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 15:34:27
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.38.94 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.38.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 11:34:21.569436 2026] [security2:error] [pid 1235:tid 1338] [client 172.70.38.94:12889] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.payment.oconnorpest.biz"] [uri "/.env.production"] [unique_id "adEvff3-ApRvBnlahBwhXAAAAQ0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 01:18:18
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.38.94 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.38.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 21:18:09.652892 2026] [security2:error] [pid 5610:tid 5706] [client 172.70.38.94:9804] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.emgusa.com"] [uri "/.env.local"] [unique_id "adBm0RKVVS6leQAG7ka72QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 19:11:06
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.38.94 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.38.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 15:10:58.235224 2026] [security2:error] [pid 2829:tid 2829] [client 172.70.38.94:10353] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.koidivision.com"] [uri "/config/.env.local"] [unique_id "adAQwvK238MtmNZMbssX0QAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
